Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CUwoIklJScnOuA1shB-LYXNb5_M.roa
File: CUwoIklJScnOuA1shB-LYXNb5_M.roa (raw, json)
Hash identifier: kEIlw99UuqfyEOz7w21Pe63kLk67wFkgThZVVpR0VSI=
Subject key identifier: 09:4C:28:22:49:49:49:C9:CE:B8:0D:6C:84:1F:8B:61:73:5B:E7:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018932D559DA120FA1902581A51A5BDF85AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CUwoIklJScnOuA1shB-LYXNb5_M.roa
Signing time: Sat 08 Jul 2023 00:09:50 +0000
ROA not before: Sat 08 Jul 2023 00:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:32:d5:59:da:12:0f:a1:90:25:81:a5:1a:5b:df:85:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 00:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094c2822494949c9ceb80d6c841f8b61735be7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:75:6e:73:7f:06:fb:6d:c9:a8:c6:70:b4:
e0:6f:6a:7c:97:a7:92:aa:47:5f:60:51:80:cb:ce:
1f:f9:07:5e:83:dc:e2:2a:12:4f:9d:23:80:ec:1a:
ac:83:36:38:d9:3d:8c:a2:f7:06:a4:af:2b:98:57:
d6:8f:cd:8f:fa:19:c1:ae:a5:ea:dd:3d:5d:a1:4c:
8d:c7:35:df:4e:7e:bd:34:81:54:c6:f4:f0:9c:31:
27:d6:1d:96:6e:67:4b:e4:c5:c3:e9:f2:cb:11:27:
f5:8b:a4:04:8e:11:84:4b:80:28:91:01:b2:6a:d3:
15:5f:e7:e7:40:ba:55:7b:0c:a6:0a:2a:d7:13:49:
9d:d7:50:90:8d:81:7d:16:fe:a3:d6:62:40:08:74:
10:78:b8:ef:48:0c:7e:40:5b:5e:21:cf:cb:83:49:
4c:34:03:e8:0a:54:e8:38:21:d2:45:af:2c:3c:c7:
f7:b2:2b:55:fc:75:0b:ba:14:eb:86:c8:6d:af:8e:
e2:b5:5f:77:4f:b8:24:7e:94:ff:4a:ac:c7:18:21:
90:4b:13:47:05:41:9d:11:e8:99:10:53:95:0b:4e:
19:e0:78:b6:e0:fc:75:1e:8a:16:20:04:d5:38:94:
80:cb:e6:44:09:97:54:6e:b4:7b:72:8b:93:b1:98:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:28:22:49:49:49:C9:CE:B8:0D:6C:84:1F:8B:61:73:5B:E7:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CUwoIklJScnOuA1shB-LYXNb5_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:ea:c4:72:2a:ad:a5:84:f1:5e:06:fc:e4:8d:ac:e9:21:57:
cb:d6:39:9c:71:78:29:e7:b7:09:f5:13:b7:2b:6a:07:7d:8e:
b0:a4:41:0f:69:04:c0:a7:d9:37:c4:6d:91:f6:35:ad:4e:1d:
b8:f8:01:7b:79:4e:a5:1b:f5:1b:a3:1a:a0:8f:82:d0:1a:bd:
73:a3:3a:6f:3e:0f:11:c7:38:f9:59:dc:02:5f:93:eb:73:b2:
09:e6:7c:20:1d:0b:bc:6e:58:21:12:60:10:ce:9b:3e:53:19:
a1:7f:0e:c2:20:fd:8b:c1:b2:34:82:18:d5:e7:17:58:8b:3a:
12:de:b5:2d:66:a3:e7:bb:95:c8:82:19:ef:a0:4b:79:e2:2b:
42:54:71:03:d4:de:08:f1:1b:5c:26:29:ba:dc:2a:8f:c2:37:
a3:10:bd:7e:38:db:70:bf:c3:b9:8d:38:04:ca:59:d7:2e:10:
63:fe:ec:d8:fc:95:d9:c7:3b:25:09:f6:20:e7:c1:86:ab:8c:
d5:da:33:09:5d:6b:c9:a3:5c:cd:e6:75:96:3e:19:d6:6f:0a:
74:87:e6:dc:2f:52:aa:ca:c2:05:5e:fd:09:65:e0:83:77:17:
e0:22:a4:65:1a:41:72:2e:f0:df:21:c0:56:bb:39:a8:64:b2:
16:d6:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:47:01 2025 by rpki-client